CVE-2015-5873

Vulnerability

A memory corruption vulnerability exists in IOGraphics, the graphics subsystem of Apple OS X, affecting versions prior to 10.11. The issue can be triggered via unspecified vectors, and the official advisory notes it as a distinct flaw from related CVEs (CVE-2015-5871, CVE-2015-5872, and CVE-2015-5890) [1].

Exploitation

An attacker must have local access to the system to exploit this vulnerability. The exact trigger sequence is not detailed in the advisory, but the unspecified vectors allow the attacker to cause memory corruption within the IOGraphics component [1].

Impact

Successful exploitation can allow an attacker to gain elevated privileges on the system or cause a denial of service via memory corruption. The highest potential impact is local privilege escalation to root or other high-integrity levels, depending on the context [1].

Mitigation

Apple addressed this vulnerability with the release of OS X 10.11 (El Capitan). Users should update to version 10.11 or later to apply the fix. No workarounds were provided. The advisory does not mention this CVE being listed in any public exploit or KEV catalog [1].